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THE CLAIMS 

A detailed listing of the claims is provided below. A status identifier is provided 
for each claim in a parenthetical expression following each claim number. 

1 . (Previously Presented) A method for controlling access to a network by 
a wireless client, the method comprising: 

assigning a network address to the wireless client, wherein the network 
address has a lease period; 

sending the assigned network address to the wireless client prior to 
establishing a secure link; 

establishing the secure link using the assigned network address; and 

sending an address of a wireless access point to the wireless client, wherein the 
wireless access point is adapted to handle the secure link established by the wireless 
client. 

2. (Original) The method of claim 1 , wherein the assigned network 
address and the wireless access point address are sent to the wireless client in a DHCP 
offer packet. 

3. (Original) The method of claim 1 , wherein the secure link is an IPSEC 

tunnel. 

4. (Original) The method of claim 1 , wherein the assigned network 
address is sent to the wireless client via the wireless access point. 
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5. (Original) The method of claim 1 , wherein the address of the wireless 
access point that is sent to the wireless client comprises an IP address and a MAC 
address. 

6. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 1. 

7. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 2. 

8. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 3. 

9. (Previously Presented) A method for controlling access to a network by 
a wireless client, the wireless client using an assigned network address having a lease 
period to communicate with the network, the method comprising: 

engaging in a negotiation of a secure link with the wireless client; 

communicating with an address server of the network to determine whether the 
lease period of the leased network address has expired; and 

if the lease period is determined to be expired, terminating the negotiation, 
thereby preventing the wireless client from accessing the network. 

1 0. (Original) The method of claim 9, wherein the negotiation is a 
negotiation of an IPSEC tunnel. 
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1 1 . (Original) The method of claim 9, wherein the address server is a DHCP 

server. 



12. (Previously Presented) A method for controlling access to a network by 
a wireless client, the method comprising: 

receiving a request for a network address from the wireless client; 

attaching information to the request to indicate that the request originated 
from a wireless client; 

relaying the request to the address server; 

receiving an assignment of an address from the address server, the address 
having a lease time; 

relaying the assignment of the address to the wireless client; 

negotiating the establishment of a secure link with the wireless client using the 
assigned address; and 

using the assigned address to communicate with clients via a wireless access 

point. 



1 3. (Previously Presented) The method of claim 1 2, further comprising: 
broadcasting an ARP packet to check whether there are any other clients having 

the same assigned address of the wireless client; and 

if a response to the ARP packet is received, terminating the negotiation, 

thereby denying the wireless client access to the network. 



14. (Previously Presented) The method of claim 1 2, further comprising: 
in response to the negotiation, creating an ARP entry that maps the assigned 
address of the wireless client to a MAC address of the wireless client. 
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1 5. (Original) The method of claim 12, wherein the request is a DHCP 
discover packet, the method further comprising: inserting data into an optional field of 
the packet to indicate that the packet was received from a wireless client; and relaying 
the packet to the address server. 

1 6. (Previously Presented) The method of claim 1 2, further comprising: 

receiving a renewal request packet having a request for a renewal of the lease 
time from the wireless client; 

if the secure link is successfully negotiated with the wireless client, inserting 
data into an optional field of the renewal request packet to indicate that the renewal 
request packet was received from a wireless client; and 

relaying the renewal request packet to the address server. 

1 7. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 9. 

1 8. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 10. 

19. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 12. 

20. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 13. 
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21. (Original) On a wireless client, a method for gaining access to a 
network, the method comprising: 

broadcasting a request for an address on the network; 
receiving an assignment of a leased address from the network, the leased 
address having a lease time; and 

negotiating a secure link with the network before the lease time expires. 

22. (Original) The method of claim 21 , wherein the request for an address 
is broadcast as a DHCP discover packet. 

23. (Original) The method of claim 21 , wherein the secure link is an IPSEC 

tunnel. 

24. (Previously Presented) The method of claim 2 1 , wherein the negotiating 
step further comprises: 

generating an ARP packet having the lease address; and 
in response to the ARP generation, initiating a negotiation of the secure link 
with the network. 

25. (Original) The method of claim 21 , wherein the leased address is 
received in a packet, wherein the packet additionally contains the network and MAC 
address of a wireless access point, wherein the secure link is negotiated with the 
wireless access point corresponding to the network address. 

26. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 21 . 
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27. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 22. 

28. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 23. 

29. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 24. 

30. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 25. 

31 . (Previously Presented) The method according to claim 1 wherein the 
assigned network address having the lease period is sent to the wireless client prior to 
authentication of the wireless client. 

32. (Previously Presented) The method according to claim 1 wherein the 
lease period is of a duration that is sufficient for the wireless client to establish a 
secure link with the wireless access point and send a renewal request of the assigned 
address via the secure link. 

33. (Previously Presented) The method according to claim 1 further 
comprising the step of extending the lease period of the assigned network address to 
a predefined duration if the wireless client establishes a secure link with the wireless 
access point and requests a renewal of the assigned address via the secure link. 
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